We have recently installed our certificate servers and issued certificates to all domain computers and users. We have noticed that the Application event logs on all the user systems and terminal servers are getting flooded with events 64 and 65 that are informational only. I am trying to find a way to eliminate these useless events. I have tried looking for a GPO or something, but so far have been unable to come up with a solution
Any help would be greatly appreciated.
================
Log Name: Application
Source: Microsoft-Windows-CertificateServicesClient-CertEnroll
Date: 9/19/2011 1:07:36 AM
Event ID: 65
Task Category: None
Level: Information
Keywords: Classic
User: SYSTEM
Computer: MY_COMPUTER.MY_DOMAIN.com
Description:
Certificate enrollment for Local system is successfully authenticated by policy server {AC59B4C0-922A-4EBB-A387-D29C34207A9C}
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-CertificateServicesClient-CertEnroll" Guid="{54164045-7C50-4905-963F-E5BC1EEF0CCA}" EventSourceName="CertEnroll" />
<EventID Qualifiers="33370">65</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-09-19T08:07:36.000000000Z" />
<EventRecordID>48478</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>MY_COMPUTER.MY_DOMAIN.com</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Context">Local system</Data>
<Data Name="ServerURL">{AC59B4C0-922A-4EBB-A387-D29C34207A9C}</Data>
</EventData>
</Event>
=======================
Log Name: Application
Source: Microsoft-Windows-CertificateServicesClient-CertEnroll
Date: 9/19/2011 1:07:31 AM
Event ID: 64
Task Category: None
Level: Information
Keywords: Classic
User: MY_DOMAIN\MY_USERNAME
Computer: MY_COMPUTER.MY_DOMAIN.com
Description:
Certificate enrollment for MY_DOMAIN\MY_USERNAME successfully load policy from policy server {AC59B4C0-922A-4EBB-A387-D29C34207A9C}
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-CertificateServicesClient-CertEnroll" Guid="{54164045-7C50-4905-963F-E5BC1EEF0CCA}" EventSourceName="CertEnroll" />
<EventID Qualifiers="33370">64</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-09-19T08:07:31.000000000Z" />
<EventRecordID>48477</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>MY_COMPUTER.MY_DOMAIN.com</Computer>
<Security UserID="S-1-5-21-1085031214-1604221776-682003330-1193" />
</System>
<EventData>
<Data Name="Context">MY_DOMAIN\MY_USERNAME</Data>
<Data Name="ServerID">{AC59B4C0-922A-4EBB-A387-D29C34207A9C}</Data>
</EventData>
</Event>